In Thunderbird, how to set up digital certificate?
Before Signing/Encrypting an E-Mail, Thunderbird should know which Digital Certificate(s) to use for each operation. Make sure that you already had requested a Digital Certificate from a Certificate Authority before doing the steps below.
To set-up the digital certificate to be used for signing/encrypting e-mails in Thunderbird:
- First, make sure that you have requested a certificate in a Certificate Authority and that you have Installed the ACS' PKCS#11 Module in Thunderbird. The e-mail address that you registered when requesting a certificate SHOULD be the same e-mail account that you are using in Thunderbird.
After successfully requesting a digital certificate. Launch Thunderbird.
Navigate to "Tools" -> "Account Settings". The "Account Settings" window will be displayed. Select the "Security" section on the tree-view on the left side (Figure 1).
Figure 1: Security Account Settings in Thunderbird.
Notice that there are 2 Panels, each for "Digital Signing" and "Encryption". Click the "Select" button. A password dialog box may appear, enter your PIN here (Figure 2).
Figure 2: When asked for a Master Password, enter your card/token PIN.
After successfully entering your card/token PIN, you should now see a "Select Certificate" dialog. Select the certificate that you want to use for signing/encryption. You will also see where the certificate(s) are stored. The "Stored in" property of the certificate will tell you in which card/token the selected certificate is stored. The value "Stored in" property should be the same Token Name of your card/token (Figure 3).
Figure 3: Select Certificate dialog in Thunderbird.
Select the appropriate signing/encrypting certificate and then select "OK".
Your Security Panel should now look like the one below (Figure 4).
Figure 4: Security settings after selecting a signing/encrypting digital certificate.
There are also other settings that you can enable in the Security Dialog; i.e. Digitally signing every e-mail you send, or encrypting every email you send.